Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/acc8e6df-2fca-392e-9a4f-c03d516656d6.roa
File: acc8e6df-2fca-392e-9a4f-c03d516656d6.roa (raw, json)
Hash identifier: oUOcbjbhq0+rmoBkfiF1pPPXSwtpwwVZhWBArVukARc=
Subject key identifier: 25:6A:5C:E3:E9:64:FB:DD:BF:C8:0F:D9:38:88:E6:31:79:51:70:B8
Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial: 010D0C9F43285848C84BE59C71335EE785A0E880
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/acc8e6df-2fca-392e-9a4f-c03d516656d6.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 36492
IP address blocks: 64.9.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4b:e5:9c:71:33:5e:e7:85:a0:e8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=5c33bb38-a921-4297-955c-2954971fba75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e6:19:7d:16:4b:9f:65:14:dd:45:16:a6:4b:
66:d4:8a:8c:25:8e:3a:2b:39:91:02:3e:01:42:a4:
a0:b4:d0:34:06:97:b8:1d:69:28:fa:96:26:7d:24:
04:ad:1a:95:96:f6:86:25:df:5f:4a:6c:b8:24:21:
7d:a7:31:dd:c8:8f:d3:cb:14:ae:de:4f:01:1b:6d:
2b:a4:2f:11:cd:ea:e7:f1:29:ed:39:98:dc:e3:7b:
d4:1a:8f:7e:de:4c:50:c2:f3:a1:95:d1:53:8b:14:
2c:48:1c:ea:1b:79:7d:6c:96:ee:cc:5d:05:89:c5:
3b:05:29:c2:84:95:39:15:98:9e:be:41:4f:f4:69:
82:8c:e3:08:1a:de:d4:fc:a1:78:a9:1f:75:3b:e8:
76:39:dd:16:80:13:c0:b6:37:03:55:2c:4d:2e:a5:
be:fe:0c:ca:7f:99:13:2f:d7:97:3e:76:90:ac:b9:
38:f5:44:17:fd:a3:91:84:11:b2:19:98:70:50:b6:
59:47:e7:1d:26:32:b5:50:da:12:2a:98:9e:12:87:
31:de:b5:b6:ed:9b:e7:02:be:a2:d6:08:5c:9c:0f:
ef:0a:c1:9d:51:c3:e9:47:e6:d2:0f:d7:52:bf:e3:
9a:29:c5:25:88:28:6d:1c:44:cb:a7:81:3a:f7:a5:
19:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:6A:5C:E3:E9:64:FB:DD:BF:C8:0F:D9:38:88:E6:31:79:51:70:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/acc8e6df-2fca-392e-9a4f-c03d516656d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
X509v3 Authority Key Identifier:
keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
sbgp-ipAddrBlock: critical
IPv4:
64.9.236.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:13:0c:63:75:50:17:b7:ed:40:5e:ca:ec:3f:55:cc:23:9a:
09:fc:82:89:93:6d:87:0f:2f:c0:20:4e:8a:50:f4:1a:d5:95:
1b:3f:d1:2d:3b:24:c3:6c:37:1d:d7:42:3e:98:d0:2a:d2:58:
64:e4:e6:30:5b:37:a6:6a:e9:f4:b7:11:76:ce:38:f5:f2:55:
48:da:7d:07:7c:d7:ec:2e:e0:fe:44:0b:aa:55:fd:e3:70:65:
01:ec:d9:61:53:5c:c2:cc:42:c0:6b:24:34:18:03:45:df:86:
11:5b:49:47:ed:23:3b:ed:3b:8c:d3:57:ef:63:8a:16:2b:6d:
3f:0f:c8:59:80:b5:71:5a:3e:4f:fd:69:f6:ce:60:3f:cd:e8:
65:d0:01:9f:8f:ef:09:a1:0a:22:9e:67:e1:5d:0a:36:8f:65:
75:e4:39:d0:53:dd:20:10:74:c9:01:a3:a5:7c:a4:0a:a8:8f:
80:58:10:05:dc:33:01:74:54:c2:e6:fe:a0:09:2b:40:e9:30:
bc:c2:89:8f:8d:df:87:74:96:80:fa:21:33:b0:12:43:31:b1:
69:15:5d:2b:3c:7f:2d:1a:d1:02:ca:6d:a6:c8:7d:98:74:a6:
e1:6e:71:87:13:1d:fc:52:7b:e9:51:f6:4f:9d:b1:bb:88:fe:
53:88:75:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:36:03 2025 by rpki-client